1 . A packet switching control system for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising: 

storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications; and 

control means (7) for performing a screening control of the packet switched connection 
on the basis of a screening parameter corresponding to the connection endpoint 
identification of the end terminal (5), wherein said control means (7) belongs to a 
different entity than said storing means. 

2. A system according to claim 1 , wherein said control means (7) belongs to any 
entity where a packet session is activated, while said storing means belongs to a fixed 
entity. 

3. A system according to claim 1 , wherein the control means (7) is arranged to 
download the subscriber-specific screening list, when the subscriber terminal (1) 
activates a packet data session. 

4. A system according to claim 3, wherein the control means (7) is arranged to 
download the subscriber-specific screening list, when a packet is transmitted. 

5. A system according to claim 3, wherein the control means (7) is arranged to 
load the subscriber-specific screening list from an external server or a location register 



(8) during an attach or location update procedure or a PDP context activation, and to 
store the loaded screening list in the storing means. 



6. A system according to claim 5, wherein the subscriber-specific screening list 
comprises a tag indicating whether the list contains allowed or denied connection 
endpoint identifications, and wherein the control means (7) is arranged to let pass only 
those data packets transmitted from/to an allowed connection endpoint. 



7. A system according to claim 3, wherein the subscriber-specific screening list is 
p initialized as an empty list which is updated by the control means (7) each time the 
£Q control means (7) receives a data packet with a connection endpoint identification not 
Q included in the subscriber-specific screening list. 
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*U 8. A system according to claim 7, wherein the update of the subscriber-specific 

iff? screening list is performed by an inquiry to a service control function which answers to 
U 

p the inquiry by transmitting a connection parameter for the corresponding connection 
endpoint identification. 



9. (Amended) A system according to claim 3, wherein the subscriber-specific 
screening list is propagated to other network elements, if it is has been modified by a 
subscriber. 



10. (Amended) A system according to claim 1 , wherein said control means (7) is a 
network element and arranged to perform packet screening for downlink packets in 
accordance with the subscriber-specific screening list. 



11. A system according to claim 10, wherein said network element (7) is arranged 
to monitor an uplink traffic transmitted from the subscriber terminal (1) via the packet 
switched connection and to command the subscriber terminal (1) to screen data 
packets transmitted to an end terminal (5) identified as a denied packet destination 
based on said subscriber-specific screening list. 




12. (Amended) A system according to claim 10, wherein the communication 
network (4) is a General Packet Radio Services (GPRS) network and wherein the 



network element is a Gateway GPRS Support Node (GGSN) (7). 



jfy 13. A system according to claim 12, wherein the screening list comprises a 

O charging information, and wherein the GGSN (7) is arranged to supply the charging 

information to a Serving GPRS Support Node (SGSN) (6) which performs a charging 

operation in accordance with the charging information. 



14. (Amended) A system according to claim 1 , wherein the connection endpoint 
identification is one of a PDP address, an IP address, a subaddress space, a port 
number, a DNS hostname and protocol, a cipherkey or a combination of these. 



15. A subscriber terminal (1) for controlling a packet switched connection to an end 
terminal (5) identified by a connection endpoint identification in a communication 
network (4), comprising: 

loading means for loading a subscriber-specific screening list; and 
control means (7) for performing a packet screening for uplink packets on the basis of 
a screening list parameter corresponding to the connection endpoint identification of 
the end terminal (5). 

16. A subscriber terminal according to claim 15, wherein said subscriber terminal is 
a mobile station equipment. 

17. A packet switching control system for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising: 

storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications, wherein a detection point information for an 
interrogation of an Intelligent Network (IN) service control function can be set 
selectively for a specific connection endpoint identification in the subscriber-specific 
screening list; and 

control means (7) for triggering an IN interrogation, when a data packet with a 
connection endpoint identification, for which a detection point information is set, is 
transmitted via the packet switched connection. 



18. A system according to claim 17, wherein the IN interrogation is triggered only 
for a first data packet having a new connection endpoint identification marked with a 
detection point. 
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19. (Amended) A system according to claim 17, wherein the control means (7) is 
commanded by the service control function, which has received the IN interrogation, 
so as to replace the corresponding detection point information by a subscriber-specific 
screening information, and so to accept a data packet or to reject the data packet in 
accordance with the subscriber-specific screening information. 



20. (Amended) A system according to claim 19, wherein the service control 
O function which has received the IN interrogation provides a more detailed subscriber- 
specific screening profile to the control means (7). 
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jry 21 . A packet switching control method for controlling a packet switched connection 
O between a subscriber terminal (1) and an end terminal (5) identified by a connection 

If* 

endpoint identification in a communication network (4), comprising the steps of: 
providing a subscriber-specific screening list for a plurality of connection endpoint 
identifications; and 

performing a screening control of the packet switched connection in another entity on 
the basis of a screening parameter corresponding to the connection endpoint 
identification of the end terminal (5). 



22. A method according to claim 21 , wherein the subscriber-specific screening list 
is loaded from an external server or a location register (8) during an attach or location 
update procedure or a PDP context activation. 



23. A method according to claim 21 , wherein the subscriber-specific screening list 
is initialized as an empty list and updated each time a data packet with a connection 
endpoint identification not included in the subscriber-specific screening list is received. 



24. (Amended) A method according to claim 21 , further comprising the step of 
O propagating the subscriber-specific screening list to other network elements, if it is has 



* n 25. (Amended) A method according to claim 21 , wherein the screening control is 

s 

q performed in a network element for downlink packets and in the subscriber terminal for 

flj uplink packets. 



26. (Amended) A method according to claim 21 , wherein an uplink traffic 
transmitted from the subscriber terminal via the packet switched connection is 
monitored and the subscriber terminal is commanded to screen data packets 
transmitted to a packet destination identified as a denied packet destination based on 
said subscriber-specific screening list. 




been modified by a subscriber. 



27. A method according to claim 18, wherein the screening list comprises a charging 
information. 

28. A packet switching control method for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising the steps of: 
providing a subscriber-specific screening list for a plurality of connection endpoint 
identifications; 

selectively setting a detection point information for an interrogation of an Intelligent 
Network (IN) service control function for a specific connection endpoint identification in 
the subscriber-specific screening list; and 

triggering an IN interrogation, when a data packet with a connection endpoint 
identification, for which a detection point information is set, is transmitted via the 
packet switched connection. 



